Because a failure or breach in one virtual machine can spread to others on the same host, the FI should set security standards for all components of a virtualisation solution (hypervisor, host and guest operating systems), strongly restrict administrative access to the hypervisor and host operating system, and set policies and standards governing the security, creation, distribution, storage, use, retirement and destruction of virtual images and snapshots.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.